SUBSTITUTE SPECIFICATION 



CONTENT UTILIZING METHOD 

5 BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to a content 
utilizing method, and more particularly to a method 
for copyright protection and usage control of a 
10 content when utilizing digital content on the 
Internet . 

Related Background Art 

Recently, because of increasing popularity of 
the Internet, a sales business of network 

15 distribution of digital contents has been attracting 
attention. However, there have been increasing 
concerns that the digital contents are illegally 
utilized without payment to copyright owners. 

For this reason, a technology for protecting 

20 the copyright has been proposed, utilizing the 

technology of encryption and authorization, such as 
MagicGate® of Sony. However, such technology has to 
utilize a special recording medium having the 
functions of encrypting and authorization, such as a 

25 memory stick. Also, such method cannot be used for 
exploiting the convenience of a copy distribution of 
digital contents. 
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Also, in the conventional content sales, the 
user pays a price for the content itself, and such 
price is constant regardless of an amount of usage of 
the content. As a result, such method has been 
unreasonable for users with a low amount of usage. 

SUMMARY OF THE INVENTION 

In consideration of the foregoing, an object of 
the present invention is to enable content 
distribution freely without requiring a special 
recording medium, while achieving protection of the 
copyright . 

Another object of the present invention is to 
enable a payment of a price according to an amount of 
usage of content by the user. 

According to one aspect, the present invention 
which achieves these objectives relates to a content 
utilizing method in a system including a user 
terminal, a content server for providing a content, a 
content processing apparatus for processing a content, 
and a usage right controlling server for controlling 
a right of use of the content, the method including a 
use requesting step of selecting a content to be used 
and a condition of use therefore in the user terminal 
and requesting the use of such content to the content 
server, a content transmitting step of encrypting the 
content with a predetermined encrypting key in the 
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content server and transmitting the content to the 
content processing apparatus, a license control 
information transmitting step of generating, in the 
content server, license control information including 
5 usage right information having identification 

information and condition of use of the selected 
content and user specific information, and 
transmitting it together with a decrypting key 
corresponding to the encrypting key to the usage 

10 right control server, a ticket transmitting step of 

generating, in the content server, a ticket including 
an identifier of the license control information and 
transmitting it to the content processing apparatus, 
an authorization step of transmitting the identifier 

15 of the license control information from the content 
processing apparatus to the usage right control 
server, which communicates with the content 
processing apparatus based on the user specific 
information in the license control information 

20 corresponding to the identifier, thereby verifying an 
authorization for use of the user, a usage right 
information transmitting step of transmitting the 
usage right information and the decrypting key from 
the authorizing server to the content processing 

25 apparatus, and a content processing step of 

decrypting the content by the decrypting key in the 
content processing apparatus and processing the 
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decrypted content based on the usage right 
information . 

Other objectives and advantages besides those 
discussed above shall be apparent to those skilled in 
5 the art from the description of a preferred 

embodiment of the invention which follows. In the 
description, reference is made to accompanying 
drawings, which form a part thereof, and which 
illustrate an example of the invention. Such example, 
10 however, is not exhaustive of the various embodiments 
of the invention, and therefore reference is made to 
the claims which follow the description for 
determining the scope of the invention. 

15 BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing the 
configuration of an entire content distribution 
system in a first embodiment; 

Fig. 2 is a flow chart showing a content 
2 0 distributing procedure in the first embodiment; 

Fig. 3 is a view showing an example of a 
content trading menu image; 

Fig. 4 is a view showing an example of a usage 
right script; 
25 Fig. 5 is a view showing an example of a 

structure of a usage right script; 

Fig. 6 is a view showing an authorizing 
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protocol for a qualification for use in the first 
embodiment ; 

Fig. 7 is a view showing an example of a usage 
right menu; and 
5 Fig. 8 is a view showing an authorizing 

protocol for a qualification for use in a second 
embodiment . 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

10 In the following, a preferred embodiment of the 

present invention will be explained with reference to 
accompanying drawings . 

At first, an outline of the embodiment of the 
present invention will be explained. A user wishing 

15 to purchase a content accesses a commerce server of 
contents, and, upon finding an interesting content, 
selects one of conditions of use proposed by a 
licensor of the content. Based on the selected 
condition of use, a usage right (right to use) script 

20 is generated, represented by a usage right (right to 
use) language. 

The content is encrypted with a first 
encrypting key, and becomes a program including 
content information (for example a Java® applet 

25 format, hereinafter referred to as a content package) . 
Then a license control, including such content 
information, a second encrypting key and the 
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aforementioned usage right script, is prepared by- 
license control preparation means. Also, use ticket 
generation means generates a use ticket including 
license control information and the second encrypting 
5 key. In a case where the user of the content has a 
third encrypting key (secret key of a public key 
encryption system) in advance, the use ticket need 
not include the second encrypting key. Such license 
control information is used to specify the 

10 aforementioned prepared license control. 

The user downloads the content package and the 
use ticket to a specified PC or a specified digital 
composite equipment. The PC or the digital composite 
equipment in which the content packet is placed will 

15 hereinafter be called a content executing device. 

The license control is transferred from the 
commerce server to the usage right control server, 
but it remains in the commerce server in case the 
commerce server also functions as the usage right 

20 control server. The server in which the license 

control is placed will hereinafter be called a usage 
right (right to use) control server (or UCS : usage 
control server) . 

When the user executes the content package in 

25 the content executing device, the content package 
reads the license control information in the use 
ticket, and transfers it to the usage right control 
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server. The usage right control server specifies a 
license control corresponding to the license control 
information among a license control database managed 
by the UCS. 

5 Then authorization data are prepared by- 

encrypting the user information contained in the 
license control, the content information and a random 
number with the second encrypting key. The usage 
right control server transmits such authorization 

10 data to the content executing device, and the content 
package transmits decrypted data, obtained by 
decrypting the authorization data by the second 
encrypting key contained in the use ticket or by the 
third encrypting key entered by the user, to the 

15 usage right control server. The usage right control 
server checks whether the decrypted data coincide 
with the data prior to the encryption, and, in case 
the authorization is successful, transmits a usage 
right script and the first encrypting key to the 

20 content executing device. The content package 

decrypts the content with the first encrypting key 
according to the condition of use of the usage right 
script, and then executes a printing, a display or a 
playing . 

25 The above -explained process for verifying the 

right of use after the license control is specified 
may also be executed in a following manner. The UCS 
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generates a random number and transmits the random 
number to the content executing device. The content 
executing device encrypts the random number with the 
second encrypting key or the third encrypting key 
5 entered by the user thereby preparing authorization 
data. The content package transmits such 
authorization data to the UCS . The UCS decrypts such 
authorization data with the second encrypting key 
contained in the license control and verifies the 
10 authorization by checking whether the decrypted data 
coincide with the transmitted random number. 
( Firs t embodiment ) 

Fig. 1 is a block diagram showing an entire 
configuration of a content distribution system of the 

15 present embodiment. 

A client PC (terminal) 2 used by the user is 
connected to an Internet protocol 1 with a protocol 
such as HTTP (Hypertext Transfer Protocol), FTP (File 
Transfer Protocol) , POP3 (Post Office Protocol 3) or 

20 SMTP (Simple Mail Transfer Protocol) . A content 

commerce server 3, having a content for sale, is also 
connected to the Internet 1. 

A content executing device 4 comprises a PC or 
a network-adaptable digital copying machine, for 

25 executing a display or a copy of the content. The 
content executing device 4 has a software necessary 
for connection to the Internet 1 (for example an OS 
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(Operating System) , various internet protocols, SSL 
(Secure Sockets Layer) , or www browser) , and a Java® 
VM environment. 

A usage right control server 5 controls a right 
5 of use of the content for the user and is also 

connected to the Internet 1. The content executing 
device 4 and the usage right control server 5 may be 
part of a single server having both functions. 

A content package 11, a use ticket 12 and a 
10 license control 13 are respectively data handled in 
the system. Details of these data will be explained 
later . 

In the following, a content distributing 
protocol of the present embodiment will be explained 

15 with reference to a flow chart shown in Fig. 2. Fig. 
2 shows a process from a purchase of a content by the 
user to a charging of a fee . 

At first, the user executes an access from its 
terminal 2 to the content commerce server 3 utilizing 

20 a web browser such as Netscape navigator, and, upon 
finding a desired content, provides an instruction 
for a purchase. Then, in a step S2 01, the content 
commerce server 3 displays an account menu of the 
content on the web browser of a display of the user 

25 terminal 2. 

Fig. 3 shows a displayed image of the content 
account menu. An account menu image 30 0 shows a 
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content ID 301, a content name 302, selectable rights 
of use and charging methods thereof. In Fig. 3, a 
"printing" right (authorization) 303 only is 
displayed as the usage right, but there may also be 
5 displayed a "display" right, a "copy" right, etc. 

Also in Fig. 3, the printing provides options 
for black-and-white and color printing, and charges 
corresponding to the selected option are displayed in 
charge displaying columns 309 - 312. Each of check 

10 boxes 3 03 - 3 07 displays a check mark "V" upon 
selection of a corresponding item. 

The user selects "printing" 3 03 and then 
selects either "black and white" or "color" (step 
S202) . In this example, it is assumed that "color" 

15 is selected. 

Then the user selects, for the charging method, 
either an "actual charge type" 304 or a "prepaid 
type" 305. For the actual charge type 304, there 
will be charged a basic printing fee (charged 

20 regardless whether the content is used or not) , or 

300 Yen, and a fee of 1200 Yen for each printing. In 
the prepaid type 305, there is further selected a 
pre-payment for two printings (check box (A) 306) or 
a pre-payment for ten printings (check box (B) 307) . 

25 If the check box (A) 306 is selected, there 

will be a charge in the amount of 2 00 0 Yen as a fee 
for the two printings, and, if the check box (B) 307 
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is selected, there will be a charge in the amount of 
9000 Yen as a fee for the ten printings. 

Also by clicking "others" button 308 with a 
mouse, the display shifts to an image (not shown) for 
5 selecting prepaid charges for numbers of printings 
other than the check box (A) 30 6 and check box (B) 
307, whereby the user is allowed to select other 
numbers of printing. 

In a step S203, the user selects the charging 

10 type as explained above, and enters a password 

specific to the user (hereinafter referred to as user 
key) in a password input column 313. Then an OK 
button 314 is clicked, whereupon the information 
entered in the account menu image is transmitted to 

15 the content commerce server 3 . Between the terminal 
2 and the content commerce server, a secure 
communication is established by a protocol such as 
SSL. On the other hand, if a cancel button 315 is 
depressed, the entered information is canceled and 

20 the display returns to a state for reentry. 

The content commerce server 3 , upon receiving 
the information designated by the user in the account 
menu image 30 0, executes following three processes 
(step S204) . Firstly, it encrypts data of the 

25 content to generate a content package 11. Secondly, 
it generates a license control 13 including a usage 
right script (hereinafter abbreviated as URS) . 
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Thirdly, it generates a use ticket 12 . 

The data of the content are encrypted by a 
public key encryption system such as DES (Data 
Encryption Standard) , utilizing an encryption key 
5 (called content key) . The content key may be 

determined in advance, or prepared for each content, 
each account or each user . 

The content package 11 is a Java® applet with 
program codes to be explained later. The content 
10 package 11 also includes content information such as 
a content ID and a content name . 

When the user selects necessary items in the 
account menu image 30 0, a URS described in the XML 
(Extensible Markup Language) language based on the 
15 selected information. Fig. 4 shows an example 400 of 
the URS. Also, Fig. 5 shows a structure of the URS. 

In Fig. 5, information 501, 510 to 513, 520 to 
522 are all text data each sandwiched with XML tags. 
For example, content information 511 is sandwiched 
2 0 between content tags and has a form of <content> to 
< /content >. The URS has a hierarchic structure, and 
a description of a lower block is sandwiched between 
the tags of an upper block. 

A header part 510 indicates the entire script, 
25 and contains content information 511, licensor 

(person licensing use of content) information 512, 
and licensee (person receiving license of use of 

25813/251/797249.1 



- 13 - 



content) information 513. 

A main part 520 describes a condition of use, 
and includes an array of right codes 521. Charge 
information 522 describes information for charging in 
5 case the user (licensee) utilizes the right code 521. 
The right codes include Play, Print, Copy, 
Transfer, Loan and Delete. Play is a right of 
executing a play such as display, play, game etc. of 
the content; Print is a right to print the content; 

10 Copy is a right to distribute a copy of the content 
to a third person; Transfer is a right of 
transferring the content to a third person; Loan is a 
right of temporarily lending the content to a third 
person; and Delete is a right of erasing the content 

15 and receiving a payback. 

A URS sample 40 0 shown in Fig. 4 includes 
descriptions of content information 4 01, licensor 
information 4 02, licensee information 4 03, a play 
(display) right code 404, a print right code 405, and 

2 0 a copyright code (right code for copy distribution of 
content right) 406. The print right code 4 05 
describes that a color printing is possible and that 
200 0 Yen are charged for two printings. 

The license control 13 includes the user key 

25 entered in the password input column 313 of the 
account menu image 30 0, the URS 4 00, content 
information and a license control ID. Since the URS 
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400 contains the user ID and the content ID, it is to 
be noted that the user ID and the content ID are 
contained in the license control 13 . The license 
control ID is an ID number uniquely given to the 
5 license control 13 . 

In the step S204, a use ticket 12 is also 
generated. The use ticket 12 memorizes the user key 
and the license control ID mentioned above. 

Then a step S205 downloads necessary files. 

10 The content package 11 and the use ticket 12 are 

downloaded from the content commerce server 3 to the 
content executing device 4 connected to the Internet 
1 and managed by the user. 

On the other hand, the license control 13 and 

15 the content key 14 are transferred from the content 

commerce server 3 to the usage right control server 5 
under the management of the seller (licensor) of the 
content. In case the usage right control server 5 is 
same as the content commerce server 3 , the license 

20 control 13 remains in the content commerce server 3 . 

In a step S206, the user executes the content 
package 11 in the content executing device 4 under 
its management. Since the content package 11 is a 
Java® applet, it can be executed from the web 

25 browser. The content package 11 at first verifies an 
authorization of use, in order to confirm whether the 
user is a user who has properly purchased the content. 
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A protocol of such use authorization verification is 
shown in Fig. 6. 

The content package 11 establishes a secure 
communication session such as SSL with the usage 
5 right control server 5. Then it reads the use ticket 
12 and acquires the license control ID. The content 
package 11 sends the license control ID to the usage 
right control server 5 and request a search of the 
license control 13 corresponding to the use ticket 12 

10 (A in Fig . 6) . 

The usage right control server (USC) 5 manages, 
in a database, license controls of licenses purchased 
by many users. The usage right control server (USC) 
5 searches the license control 13 corresponding to 

15 the license control ID, and generates a random number. 
It generates authorization data by encrypting data, 
formed by combining the user ID and the content ID 
contained in the license control 13 and the above- 
mentioned random number, with the user key. In the 

20 present embodiment, the user key is a password 
constituted of a character train. 

The encryption, utilizing a designated 
character train as the key, can be executed by a 
known technology such as UNIX® Crypt program. 

25 Otherwise, a higher security can be obtained by an 

encryption method such RSA or PGP, utilizing the user 
key as a public of a public key encryption process. 
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The usage right control server (UCS) 5 
transmits the authorization data to the content 
executing device 4, and requests a decryption of the 
authorization data (B in Fig. 6). 
5 The content package 11 decrypts the 

authorization data with the user key in the use 
ticket 12. Otherwise, in case the authorization data 
are encrypted with a public key encryption method, 
the decryption is executed with secret key data 

10 managed by the user. In this case, an operation of 
entering the secret key is required. Then the 
decrypted authorization data are transmitted to the 
usage right control server (UCS) 5 and a checking is 
requested (C in Fig. 6) . 

15 The usage right control server (UCS) 5 checks 

whether the authorization data prior to the 
encryption and the decrypted authorization data 
transmitted from the content executing device 4 are 
mutually same. If not, it is judged that the user of 

2 0 the content executing device 4 does not have a proper 
authorization for use, then an authorization error is 
transmitted to the content executing device 4 and the 
process is terminated. If same, it is judged that 
the user of the content executing device 4 has a 

25 proper authorization for use, and the URS 4 00 in the 
license control 13 is transmitted to the content 
executing device 4 (D in Fig. 6). 
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The content executing device 4 checks whether 
the transmitted URS 4 00 belongs thereto by inspecting 
the user information. In case of no problem, a usage 
right menu based on the URS 4 00 is displayed on a 
display of the content executing device 4 . Also the 
content is decrypted by the content key of the use 
ticket 12 (step S208) . For example, in case of the 
URS 4 00 shown in Fig. 4, three rights of Play 
(display) , Print and Copy are displayed on the usage 
right menu. 

Fig. 7 shows an example of the usage right menu. 
The usage right menu image 700 shown in Fig. 7 
includes a check box 701 for selecting the right of 
use, an OK button 702 for executing the selected 
usage right, and a cancel button 703 for terminating 
the process . 

The user selects a desired right among these 
rights (step S209). Let us consider a case, for 
example, of selecting Print (printing in Fig. 7). 
Since the Print is a prepaid charging method for two 
prints in the example shown in Fig. 4, the content 
package 11 sends a request to the usage right control 
server (UCS) 5 for checking whether the payment has 
been made and whether two printings have already been 
made (E in Fig. 6) . 

The usage right control server (UCS) 5 executes 
such checks and, in case of any problem, transmits a 
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charging check error to the content executing device 
4. Also, an OK is transmitted in case the charging 
check finds no problem (F in Fig. 6; step S210) . The 
content package 11 terminates the process in case of 
5 receiving the charging check error. 

The content package 11, upon receiving an OK, 
executes the Print right (step S211) . When the 
execution is terminated in a normal manner, use 
history data are transmitted to request a charging 
10 process to the usage right control server (UCS) 5 (G 
in Fig . 6 ) . 

The usage right control server (UCS) 5 executes 
a corresponding charging to the licensee described in 
the license control 13 (step S212) . The usage right 

15 control server (UCS) 5 has a memory area (credit 

account) for memorizing a credit to the licensee, and 
the charged amount is added to such credit account. 
Then the remaining sum of the account is requested to 
the licensee for example at the end of each month. 

20 In the present example, since the prepaid 

charging method is adopted, the addition to the 
account is executed at the preparation (step S2 04) of 
the license control 13 (including the URS 400), and 
the step S212 executes a process of decreasing a 

25 remaining number available in the prepaid amount. 

Also, in case of executing the right for which 
the actual charging method is selected, the step S212 
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adds a fee of the condition designated by the URS 4 00 
to the credit account. 

In the present embodiment, as explained in the 
foregoing, when the content commerce server 3 
5 receives the information designated by the user 

according to the content of the account menu image 
3 00 displayed on the terminal 2, the content package 
11 and the use ticket 12 are downloaded from the 
content commerce server 3 to the content executing 

10 device 4, and the license control 13 is transferred 

from the content commerce server 3 to the usage right 
control server 5. 

Then the usage right control server 5 utilizes 
the user key in the transferred license control 13 

15 for encrypting the corresponding license control 13 

thereby preparing authorization data, and sends it to 
the content executing device 4 . 

The content executing device 4 utilizes the 
user key in the use ticket 12 to decrypt the 

2 0 transmitted authorization data and sends it to the 
usage right control server 5. In case the 
authorization data prior to the encryption are same 
as the decrypted authorization data, the usage right 
control server 5 judges that the user of the content 

25 executing device 4 has an authorization for use, and 
transmits the usage right script 400 and the content 
key in the license control 13 to the license 
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executing device 4 . 

The license executing device 4 checks the user 
information for confirming that the transmitted usage 
right script 400 belongs to it, and, in case there is 
5 no problem, displays a usage right menu 7 00 based on 
the usage right script 40 0 on the display of the 
content executing device 4 and decrypts the content 
by the transmitted content key. 

In the above-described configuration, the 
10 content package 11, being encrypted, cannot be 
improperly utilized upon delivery. 

In the event that the user gives the use ticket 
12 to another third person, such third person may 
improperly use such use ticket 12. However, there 
15 should not be a major problem since the user usually 
manages the use ticket 12 confidentially as personal 
information of its own. 

( Second embodiment) 

In the following, a second embodiment will be 
20 explained. The present embodiment is different from 
the first embodiment in the method of verifying the 
authorization for use. More specifically, the 
verification of the authorization for use in (A) to 
(D) in Fig. 6 is replaced by a method shown in Fig. 8. 
25 Therefore, an explanation will be given only to the 
verification of the authorization for use and other 
portions will not be explained. 
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Referring to Fig. 8, the usage right control 
server (UCS) 5 generates a random number and 
transmits it to the content executing device (801). 
The content package 11 receives the random number and 
5 encrypts the random number with the second encrypting 
key or the third encrypting key (which is a secret 
key of the user in a public key encrypting system, in 
which case the second encrypting key becomes a public 
corresponding to such secret key) to prepare 

10 authorization data, and sends it to the usage right 
control server (UCS) 5 (802). 

The usage right control server (UCS) 5 decrypts 
the received authorization data with the second 
encrypting key contained in the license control 13, 

15 and makes a comparison with the random number prior 
to the transmission. In case of coincidence, the 
authorization for use is confirmed and the URS is 
transmitted to the content executing device (803) . 
On the other hand, in case of no coincidence, the 

20 authorization for use is considered absent, and for 
example a verification error is transmitted to the 
content executing device to terminate the process. 

In the present embodiment, as explained in the 
foregoing, the authorization for use is verified by 

2 5 transmitting and receiving a random number between 
the usage right control server 5 and the content 
executing device 4 to achieve the verification of the 
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authorization for use in an easy and secure manner. 

The embodiments explained in the foregoing 
enable arbitrary delivery of the content package 
without employing a special recording medium, thereby 
5 allowing increased distribution of the contents . 

Also for the payment of the charge for the usage of 
the content, a charging method in which the user of 
the content makes a payment according to the number 
of uses can be employed. 

10 The present invention may be applied to a 

system formed from plural equipment components (for 
example a main computer, an interface equipment, a 
display etc.) or to an apparatus constituted of a 
single equipment component, to an extent that the 

15 functions of the aforementioned embodiments can be 
realized. 

The present invention also includes a 
configuration of supplying a computer in the 
apparatus or the system, connected with various 

20 devices for operating such devices so as to realize 

the functions of the aforementioned embodiments, with 
program codes of a software for realizing the 
functions of the aforementioned embodiments and the 
computer (or CPU (Central Processing Unit) or MPU 

25 (Micro Processing Unit) ) of such system or apparatus 
operates the devices according to the supplied 
program. In such case, the program codes themselves 
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read from a memory medium realize the functions of 
the aforementioned embodiments, and such program 
codes themselves, or means for supplying the computer 
with such program codes, for example a memory medium 
5 storing the program codes, constitutes the present 
invention . 

The memory medium for supplying such program 
codes can be, for example, a floppy disk, a hard disk, 
an optical disk, a magnetoopt ical disk, a CD-ROM, a 
10 CD-R, a magnetic tape, a non- volatile memory card or 
a ROM. 

Also the present invention naturally includes 
the program codes not only in a case where the 
computer executes the read program codes to realize 

15 the functions of the aforementioned embodiments, but 
also in a case where an OS (operating system) 
functioning on the computer or another application 
realizes the functions of the aforementioned 
embodiments under the instructions of such program 

2 0 codes . 

Furthermore, the present invention includes a 
case where the program codes read from the memory 
medium are once stored in a memory provided in a 
function expansion board inserted in the computer or 
25 a function expansion unit connected to the computer, 
and a CPU or the like provided in such function 
expansion board or the function expansion unit 
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executes all the actual processes or a part thereof 
thereby realizing the functions of the aforementioned 
embodiments . 

In case the present invention is applied to the 
5 memory medium mentioned above, program codes 

corresponding to the foregoing flow charts can be 
stored in such memory medium. 

Although the present invention has been 
described in its preferred form with a certain degree 
10 of particularity, many apparently widely different 
embodiments of the invention can be made without 
departing from the spirit and the scope thereof. It 
is to be understood that the invention is not limited 
to the specific embodiments thereof except as defined 
15 in the appended claims. 
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